Email Log Search equivalent?

[Adam Wanninger]

I have been tasked with locating emails from certain addresses and domains each day.  I tried to run this command but it took hours to run and I didn't know how to limit the results to the last 24 hours:

gam all users show message query "from:doubletre...@res.hilton.com"

I'm looking for something that will generate a report similar to what I can manually create through the admin console in Reporting > Email Log Search.  

[Jay Lee]

Email log search is not available via api. However if you have Enterprise edition you can log to bigquery and perform searches there:

https://support.google.com/a/answer/7233312?hl=en

Jay

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/e998931f-4c39-4b71-b4d8-214f1ce0a1dbn%40googlegroups.com.

[Taylor Coons]

How about using the investigation tool under security?  You can do searches and download results.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CA%2BVVBp9Gcoh8P56%3DHX_s6kZ8JfmEMnU4X2aqSOOA34id-Wj%3DPg%40mail.gmail.com.

[Jay Lee]

Investigation tool does not have an API. GAM needs an API.

Jay

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAJFSCz%2BdDwrhoe2T1L3e8kH9FwjXTj5XeeWG1AUPzwgJYiu%2BiA%40mail.gmail.com.

[Taylor Coons]

I understand this is the gam group.  I don't know all the requirements of the request other than a tool similar to the email log search.  The investigation tool would give the requested report and it could be downloaded albeit still manually.  

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CA%2BVVBp8%2BLDoREVy5QYbbYrjj9esZBVPTqxQSp9M7jMbFKHesJQ%40mail.gmail.com.

[Jay Lee]

What I am saying is that this is not feasible with Google Workspace today.

Jay

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/CAJFSCzKQN%3D2iAHJd5hvfLqrijOM4Qoy8iLeEnDmJNr8_%3DoQcfQ%40mail.gmail.com.

[Adam Wanninger]

Thanks for all the input.  We do have the Plus licenses, so I might be able to set up a report or alert that will be sent to me when we receive emails meeting certain criteria?  I'll have to do some learnin' and it could benefit me long term.

BigQuery seems like a very powerful tool also and if I can automate the generation of the reports from it, I could fill this need and learn something cool at the same time.  :)